GHSA-M9GV-6P22-QGMJ ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

ai-controller-frontend payment status in basket isn't reset

Impact Payment status in basket isn't reset...

The vulnerability of the “Manage Incoming Payment Files” component of the SAP S/4HANA software platform allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the “Manage Incoming Payment Files” component in the SAP S/4HANA software platform is related to deficiencies in the authentication process. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

ai-controller-frontend payment status in basket isn't reset

Payment status in basket isn't reset...

Improper Enforcement Of Behavioral Workflow

aimeos/ai-controller-frontend is vulnerable to Improper Enforcement of Behavioral Workflow. The vulnerability is due to not resetting the payment status of a user's basket after the user completes a purchase...

CVE-2024-39325

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325 aimeos/ai-controller-frontend doesn't reset payment status in basket

aimeos/ai-controller-frontend is the Aimeos frontend controller. Prior to versions 2024.04.2, 2023.10.9, 2022.10.8, 2021.10.8, and 2020.10.15, aimeos/ai-controller-frontend doesn't reset the payment status of a user's basket after the user completes a purchase. Versions 2024.04.2, 2023.10.9,...

CVE-2024-39325

Affected software: aimeos/ai-controller-frontend (Aimeos frontend controller). Root cause (as described): does not reset the payment status of a user’s basket after the user completes a purchase. Impact (as stated): payment status may remain abnormal in the user’s basket after checkout; exact exp...

WordPress PayPlus Payment Gateway plugin <= 6.6.8 - Unauthenticated SQL Injection vulnerability

Unauthenticated SQL Injection vulnerability discovered by Project Black in WordPress Plugin PayPlus Payment Gateway versions = 6.6.8...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores open-sourced by Aimeos. Aimeos has a security vulnerability that stems from ai-controller-frontend not resetting the payment status of a user's shopping cart after the user completes a purchase. The affected versions are as follows:...

PT-2024-28450 · Aimeos · Ai-Controller-Frontend

Name of the Vulnerable Software and Affected Versions: aimeos/ai-controller-frontend versions prior to 2024.04.2 aimeos/ai-controller-frontend versions prior to 2023.10.9 aimeos/ai-controller-frontend versions prior to 2022.10.8 aimeos/ai-controller-frontend versions prior to 2021.10.8...

Malicious code in viona-atm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e4f8f45815fbf187f1a9029ae5a5a432aa518eab883ecec21dbed96d6eecac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-7066 Malicious code in viona-atm-payment (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2e4f8f45815fbf187f1a9029ae5a5a432aa518eab883ecec21dbed96d6eecac3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress PayPlus Payment Gateway Plugin <= 6.6.8 is vulnerable to Cross Site Scripting (XSS)

Software PayPlus Payment Gateway Type Plugin Vulnerable versions = 6.6.8 Fixed in 6.6.9 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-37459 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 3897da93b46e Credits Le Ngoc Anh Required...

The vulnerability of INPAS SOFT UniPORT Eslip software, related to insufficient validation of input data, allows a perpetrator to gain access to the application’s administrative web interface.

The vulnerability of INPAS SOFT UniPORT Eslip software is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to gain access to the application’s administrative web interface remotely...

PT-2024-24212 · Unknown · Designa Abacus

Name of the Vulnerable Software and Affected Versions: DESIGNA ABACUS versions prior to v.19 Description: The issue allows an attacker to bypass the payment process via a crafted QR code. Recommendations: For versions prior to v.19, update to a version that includes a fix for this issue to preven...

CVE-2024-31802

DESIGNA ABACUS v.18 and before allows an attacker to bypass the payment process via a crafted QR code...

CVE-2024-31802

CVE-2024-31802 affects DESIGNA ABACUS v18 and earlier. The root cause allows bypassing the payment process via a crafted QR code. A fix is available in v19+, with PT-Security recommending updating to a version that includes the patch; earlier guidance suggests restricting QR payments as a tempora...